X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=TODO;h=7a3a5d01f7831c56fe413a3f63c6e65584b48554;hp=c91404e3da78a8623dc08d973dfa268d0f428dfd;hb=e7b4d43ec3d5eb0099a3978f98a46f3c15443b23;hpb=a46fe318fccbbb3a7d629f95fc8fdbf4c33ed119 diff --git a/TODO b/TODO index c91404e3d..7a3a5d01f 100644 --- a/TODO +++ b/TODO @@ -1,4 +1,7 @@ Bugfixes: +* Re-enable "fsck -l" when it is ready: + https://bugs.freedesktop.org/show_bug.cgi?id=79576#c5 + * Should systemctl status \* work on all unit types, not just .service? * enabling an instance unit creates a pointless link, and @@ -20,7 +23,6 @@ Bugfixes: See the comment in sd_bus_unref() for more.. External: - * Fedora: when installing fedora with yum --installroot /var/run is a directory, not a symlink https://bugzilla.redhat.com/show_bug.cgi?id=975864 @@ -30,11 +32,24 @@ External: Features: +* tmpfiles: add support for "+" suffix for more commands + +* support empty /etc boots nicely: + - apply presets at first boot + - tmpfiles: allow overriding of /etc/mtab + - tmpfiles: add nice way to copy files /usr/share/etc → /etc + +* generator that automatically discovers btrfs subvolumes, identifies their purpose based on some xattr on them. + +* support setting empty environment variables with Environment= and EnvironmentFile= + +* machined/machinectl: sort IP addresses we return by scope and protocol +* machined: write NSS module for looking up IP addresses for machines + * timer units: actually add extra delays to timer units with high AccuracySec values, don't start them already when we are awake... * timesyncd: - hookup with networkd: NTP servers from dhcp - - hookup with networkd: listen to online/offline state * a way for container managers to turn off getty starting via $container_headless= or so... @@ -50,26 +65,16 @@ Features: * mount_cgroup_controllers(): symlinks need to get the label applied -* For timer units: add some mechanisms so that timer units that trigger immediately on boot do not have the services they run added to the initial transaction and thus confuse Type=idle. Alternatively, split up the boot-up state into two, and make Type=idle only be affected by jobs for the default target, but ignore any further jobs +* For timer units: add some mechanisms so that timer units that trigger immediately on boot do not have the services they run added to the initial transaction and thus confuse Type=idle. * Add RPM macros for registering/unregistering binfmt drop-ins * Add timeout to early-boot, and shut down the system if it is hit. Solves the laptop-in-bag problem and is useful for embedded cases -* sd-resolve: add callback api - -* ImmutableSystem=yes/no or so to mount /usr, /boot read-only/invisible, and leave /var and /etc writable - -* InaccessibleHome=yes/no or so to hide /home and /run/user from a service - -* Run most system services with cgroupfs read-only and procfs with a more secure mode +* Run most system services with cgroupfs read-only and procfs with a more secure mode (doesn't work, since the hidepid= option is per-pid-namespace, not per-mount) * sd-event: generate a failure of a default event loop is executed out-of-thread -* add "M" as recursive version of "m" to tmpfiles, then use it for - chowning /run/log/journal (but not /var/log/journal), so that we - adjust the perms of journal files created before tmpfiles ran. - * expose "Locked" property on logind sesison objects * add bus api to query unit file's X fields. @@ -88,18 +93,6 @@ Features: do not have to open it to know that it is not interesting for us, for the most common operations. -* support transient mount units - -* add an "input" group to udev logic and add all input devices to it - -* machined: provide calls GetMachineByAddress() on the manager - interface to get the machine for a local IP address, and - GetAddress() on the Machine interface to get the Address for a - machine. Implement via forking off child process which quickly joins - the cotnainer and passes data to parent. Show this in "machinectl - status", and use it to implement NSS module to provide automatic - name resolution for containers. - * add generator that pulls in systemd-network from containers when CAP_NET_ADMIN is set, more than the loopback device is defined, even when it is otherwise off @@ -159,8 +152,6 @@ Features: * Automatically configure swap partition to use for hibernation by looking for largest swap partition on the root disk? -* socket-proxyd: Use sd-resolve to resolve the server address - * rfkill,backlight: we probably should run the load tools inside of the udev rules so that the state is properly initialized by the time other software sees it * After coming back from hibernation reset hibernation swap partition using the /dev/snapshot ioctl APIs @@ -183,27 +174,19 @@ Features: * load .d/*.conf dropins for device units -* gparted needs to disable auto-activation of mount units somehow, or - maybe we should stop doing auto-activation of this after boot - entirely. https://bugzilla.gnome.org/show_bug.cgi?id=701676 - Maybe take a BSD lock at the disk device node and teach udev to - check for that and suppress event handling. - * allow implementation of InaccessibleDirectories=/ plus ReadOnlyDirectories=... for whitelisting files for a service. * sd-bus: - - make AddMatch calls on dbus1 transports async - when kdbus does not take our message without memfds, try again with memfds - systemd-bus-proxyd needs to enforce good old XML policy - - port exit-on-idle logic to byebye ioctl - allow updating attach flags during runtime - pid1: peek into activating message when activating a service - introduce sd_bus_emit_object_added()/sd_bus_emit_object_removed() that automatically includes the build-in interfaces in the list - - constructors for bus messages should probably not be OK with a NULL bus pointer - - .busname units should not use get_user_creds()/get_cgroup_creds() but instead do NSS only in temporarily forked off child + - port to sd-resolve for connecting to TCP dbus servers - see if we can drop more message validation on the sending side - add API to clone sd_bus_message objects + - make AddMatch calls on dbus1 transports async? - kdbus: matches against source or destination pids for an "strace -p"-like feel. Problem: The PID info needs to be available in userspace too... - longer term: priority inheritance - dbus spec updates: @@ -214,7 +197,6 @@ Features: - path escaping - update systemd.special(7) to mention that dbus.socket is only about the compatibility socket now - test bloom filter generation indexes - - port to sd-resolve for connecting to TCP dbus servers * sd-event - allow multiple signal handlers per signal? @@ -294,7 +276,6 @@ Features: * introduce ExecCondition= in services * EFI: - - write man page for efi boot generator - honor language efi variables for default language selection (if there are any?) - honor timezone efi variables for default timezone selection (if there are any?) - change bootctl to be backed by systemd-bootd to control temporary and persistent default boot goal plus efi variables @@ -401,7 +382,6 @@ Features: - systemctl: "Journal has been rotated since unit was started." message is misleading - support "systemctl stop foobar@.service" to stop all units matching a certain template - Something is wrong with symlink handling of "autovt@.service" in "systemctl list-unit-files" - - rework wait filter to not require match callback - better error message if you run systemctl without systemd running - systemctl status output should should include list of triggering units and their status @@ -414,8 +394,6 @@ Features: - systemctl list-unit-files should list generated files (and probably with a new state "generated" for them, or so) - systemctl: maybe add "systemctl add-wants" or so... -* introduce ntp.service (or suchlike) as symlink that is used to arbitrate between various NTP implementations - * deal with sendmail/postfix exclusivity * timer units: @@ -457,7 +435,7 @@ Features: * on shutdown: move utmp, wall, audit logic all into PID 1 (or logind?), get rid of systemd-update-utmp-runlevel -* add "provisioning" instructions to setup an empty /etc + /var +* add "factory" instructions to setup an empty /etc + /var - used to setup a new container from a shared /usr - superset of tmpfiles model - instructions shipped by packages and stored in /usr/lib/ @@ -472,14 +450,9 @@ Features: * currently x-systemd.timeout is lost in the initrd, since crypttab is copied into dracut, but fstab is not * nspawn: - - nspawn: --read-only is not applied recursively to submounts - bind mount read-only the cgroup tree higher than nspawn - - nspawn: make it work for dwalsh and shared /usr containers -- tmpfs mounts as command line parameters - refuses to boot containers without /etc/machine-id (OK?), and with empty /etc/machine-id (not OK). - support taking a btrfs snapshot at startup and dropping it afterwards - - maybe: hookup nspawn and PrivateNetwork=yes with "ip netns" - - generate predictable mac addresses for the netdev we create (host0), maybe based on guest's machine - name and machine-id of host (?) * cryptsetup: - cryptsetup-generator: allow specification of passwords in crypttab itself @@ -494,9 +467,6 @@ Features: * make timer units go away after they elapsed -* http://lists.freedesktop.org/archives/systemd-devel/2012-September/006502.html - (network and remote-fs on shutdown) - * come up with a nice way to write queue/read_ahead_kb for a block device without interfering with readahead * move PID 1 segfaults to /var/lib/systemd/coredump? @@ -511,8 +481,6 @@ Features: * MountFlags=shared acts as MountFlags=slave right now. -* ReadOnlyDirectories= is not applied recursively to submounts - * drop PID 1 reloading, only do reexecing (difficult: Reload() currently is properly synchronous, Reexec() is weird, because we cannot delay the response properly until we are back, so instead of @@ -563,8 +531,6 @@ Features: * introduce mix of BindTo and Requisite -* add DeleteSocketsOnStop=yes|no option to socket units - * There's currently no way to cancel fsck (used to be possible via C-c or c on the console) * add option to sockets to avoid activation. Instead just drop packets/connections, see http://cyberelk.net/tim/2012/02/15/portreserve-systemd-solution/ @@ -610,8 +576,6 @@ Features: when we start a service in order to avoid confusion when a user assumes starting a service is enough to make it accessible -* support User= and Group= attributes for AF_UNIX sockets. (difficult, requires NSS from PID 1?) - * Make it possible to set the keymap independently from the font on the kernel cmdline. Right now setting one resets also the other. @@ -624,8 +588,6 @@ Features: - readahead: when bumping /sys readahead variable save mtime and compare later to detect changes - readahead: make use of EXT4_IOC_MOVE_EXT, as used by http://e4rat.sourceforge.net/ -* add support for /bin/mount -s - * GC unreferenced jobs (such as .device jobs) * write blog stories about: @@ -665,8 +627,6 @@ Features: * fingerprint.target, wireless.target, gps.target, netdevice.target -* io priority during initialization - * drop cap bounding set in readahead and other services * systemd-python: @@ -703,12 +663,13 @@ Features: then remove remove libkmod dependency and CAP_SYS_MODULE - add veth netdev support (c.f. http://shorewall.net/bridge-Shorewall-perl.html#veth) - add tun/tap netdev support + - add more attribute support for SIT tunnel -* dhcp: - - export timezone information - - FORCERENEW +* networkd-wait-online: + - make operstates to wait for configurable? * dhcp: + - figure out how much we can increase Maximum Message Size - export timezone information - FORCERENEW @@ -724,12 +685,6 @@ External: * patch kernel for xattr support in /dev, /proc/, /sys? -* NTP: the kernel's 11-minutes-mode syncs the system time to the RTC, but only - in an ~30 minutes window. It does not adjust larger differences. Find a way - to tell the kernel, to always do a full time sync when the RTC is in UTC and - we are in 11-minutes-mode. When we trust the system time to NTP we also want - the RTC to sync up. - * kernel: add device_type = "fb", "fbcon" to class "graphics" * drop accountsservice's StandardOutput=syslog and Type=dbus fields